What is the severity of RHSA-2023:2041?

The severity of RHSA-2023:2041 varies based on the specific vulnerabilities it addresses, including critical and high-severity vulnerabilities.

How do I fix RHSA-2023:2041?

To fix RHSA-2023:2041, apply the recommended updates provided in the advisory for the affected applications.

What vulnerabilities are addressed in RHSA-2023:2041?

RHSA-2023:2041 addresses path traversal and privilege escalation vulnerabilities among others.

Which applications are affected by RHSA-2023:2041?

Applications affected by RHSA-2023:2041 include Migration Toolkit for Applications, Keycloak, and Spring Security OAuth2 Client.

Is there a workaround for RHSA-2023:2041?

There are no specific workarounds recommended for RHSA-2023:2041 other than applying the security updates.

Vulnerability/
RHSA-2023:2041

CWE

22 918

27/4/2023

RHSA-2023:2041: Important: Migration Toolkit for Applications security and bug fix update

First published: Thu Apr 27 2023(Updated: )

Migration Toolkit for Applications 6.1.0 Images<br>Security Fix(es):<br><li> keycloak: path traversal via double URL encoding (CVE-2022-3782)</li> <li> spring-security-oauth2-client: Privilege Escalation in spring-security-oauth2-client (CVE-2022-31690)</li> <li> xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow (CVE-2022-41966)</li> <li> Apache CXF: SSRF Vulnerability (CVE-2022-46364)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software	Affected Version	How to fix

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2023:2041?
The severity of RHSA-2023:2041 varies based on the specific vulnerabilities it addresses, including critical and high-severity vulnerabilities.
How do I fix RHSA-2023:2041?
To fix RHSA-2023:2041, apply the recommended updates provided in the advisory for the affected applications.
What vulnerabilities are addressed in RHSA-2023:2041?
RHSA-2023:2041 addresses path traversal and privilege escalation vulnerabilities among others.
Which applications are affected by RHSA-2023:2041?
Applications affected by RHSA-2023:2041 include Migration Toolkit for Applications, Keycloak, and Spring Security OAuth2 Client.
Is there a workaround for RHSA-2023:2041?
There are no specific workarounds recommended for RHSA-2023:2041 other than applying the security updates.

collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2023:2041
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/remedy
agent/severity
agent/softwarecombine
agent/tags
agent/title
agent/type
agent/weakness

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.